Ben Stringer wrote: > On Tue, 2007-06-05 at 08:41 +0200, Ralf Corsepius wrote: >>> The >>> same goes for mounting /tmp and /var noexec. Why do you think there's >>> an option to mount a partition with the noexec parameter? >> It's useful for data partitions, but even then mounting read only is >> more useful. > > I think you will find very quickly that mounting either /tmp or /var as > read-only is anything but useful. Would you seriously suggest doing > this? I am not sure you understand these options. > I believe he was talking about mounting data partitions read only. Not /tmp and /var. At least that is how I read it. Mikkel -- Do not meddle in the affairs of dragons, for thou art crunchy and taste good with Ketchup!